BackupPC-users

Re: [BackupPC-users] Trouble setting up backup to a Windows host

2010-03-16 10:34:51
Subject: Re: [BackupPC-users] Trouble setting up backup to a Windows host
From: "Sorin Srbu" <sorin.srbu AT orgfarm.uu DOT se>
To: "'General list for user discussion, questions and support'" <backuppc-users AT lists.sourceforge DOT net>
Date: Tue, 16 Mar 2010 15:32:44 +0100
>-----Original Message-----
>From: Les Mikesell [mailto:lesmikesell AT gmail DOT com]
>Sent: Tuesday, March 16, 2010 2:04 PM
>To: sorin.srbu AT orgfarm.uu DOT se; General list for user discussion, 
>questions and
>support
>Subject: Re: [BackupPC-users] Trouble setting up backup to a Windows host
>
>Sorin Srbu wrote:
>>
>>> From what I understand, that sounds like it's rejecting the
>>> authentication passed to it, not accepting the credentials the unix
>>> machine is passing.
>>>
>>> Are you running a domain?
>>
>> Yes I do. A regular plain vanilla Win2k3-domain.
>
>Is your smb.conf set up to match?  I'm not sure if mounting via cifs reads 
>it,
>but for smbclient you need to have at least the domain and password server 
>set
>in there, and maybe security=server.  If this is really Active Directory, it
>needs to have the domain compatibility mode set or you may need some other
>settings - and to join the domain.

With the security set to server I get the error "Failed to join domain: 
Invalid domain role". If security is set to ADS it asks for a password and I 
get "Using short domain name..." and " could not connect to server 
DC.mydomain" and " The user name or password was not correct".


>> Does this BPC-solution by any chance require that passwords are sent in
>> clear text? I'm grasping for straws...
>
>I'm not sure plain text is ever used.  The choices would be NT LANMAN style
>hashes or whatever they changed to in win2k3.  A samba 3.x version should be
>able to do both. I don't think the kernel cifs module does kerberos or client
>signing, though.

Just checked the Windows Default Domain Policy to make sure. The LAN Manager 
Authentication level is set to "Send NTLMv2 response only/Refuse LM & NTLM". 
This is another enforced policy from the University IT-department. I don't 
know however if this is a problem for BPC and the authentication. Maybe 
somebody else knows.



-- 
/Sorin

Attachment: smime.p7s
Description: S/MIME cryptographic signature

------------------------------------------------------------------------------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
BackupPC-users mailing list
BackupPC-users AT lists.sourceforge DOT net
List:    https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:    http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/
<Prev in Thread] Current Thread [Next in Thread>